Privacy Policy

Last Updated: December 15, 2024

1. Information We Collect

Health Information

We collect health data from various sources to calculate your personalized health score:

• Electronic Health Records (EHR): Medical records from healthcare providers, hospitals, and clinics
• Insurance Claims: Claims data from your health insurance providers
• Lab Results: Test results and diagnostic information
• Medications: Prescription and over-the-counter medication information
• Vital Signs: Blood pressure, weight, heart rate, and other health metrics
• Appointments: Healthcare appointment history and scheduling data

Personal Information

• Name, date of birth, gender, and contact information
• Emergency contact details
• Account credentials and security information
• App usage data and preferences
• Device information and technical logs

2. How We Use Your Information

Health Score Calculation

We analyze your health data using our proprietary algorithm to:

• Calculate your personalized health score (300-850 scale)
• Identify health improvement opportunities
• Provide personalized health recommendations
• Track your health progress over time

Service Delivery

• Synchronize and organize your health records
• Connect you with relevant healthcare services
• Provide personalized marketplace recommendations
• Send health reminders and notifications
• Offer customer support and technical assistance

3. Information Sharing and Disclosure

Authorized Sharing

We may share your information only in these specific circumstances:

• With Your Consent: When you explicitly authorize sharing with healthcare providers or family members
• Marketplace Partners: Limited information to provide you with relevant health services (with your permission)
• Healthcare Providers: When you choose to share your health score or records with your doctors
• Emergency Situations: Critical health information shared with emergency responders when necessary
• Legal Requirements: When required by law or to protect rights and safety

Service Providers

We work with trusted third-party service providers who help us operate our platform. These partners are bound by strict confidentiality agreements and can only use your data to provide services on our behalf.

4. Data Security and Protection

Security Measures

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict role-based access controls limit who can view your information
• HIPAA Compliance: We maintain HIPAA compliance for all protected health information
• Regular Audits: Independent security audits and penetration testing
• Secure Infrastructure: Enterprise-grade cloud security with 99.9% uptime

Data Retention

We retain your health information for as long as necessary to provide our services and as required by applicable laws. You can request deletion of your data at any time, subject to legal and regulatory requirements.

5. Your Rights and Choices

Access and Control

You have the right to:

• Access, view, and download your health data
• Correct or update inaccurate information
• Delete your account and associated data
• Restrict or limit how we use your information
• Export your data in a portable format
• Opt-out of non-essential communications

Consent Management

You can manage your privacy preferences through your account settings, including:

• Data sharing permissions
• Marketplace recommendation settings
• Notification preferences
• Third-party integrations

6. Children's Privacy

HealthApp is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected information from a child under 18, we will delete that information immediately.

7. International Data Transfers

Your health data is primarily stored and processed in secure data centers located in the United States. If you are accessing our services from outside the US, your information may be transferred to and processed in the US, where privacy laws may differ from your country.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Sending an email notification to your registered email address
• Posting a notice in the app
• Updating the "Last Updated" date at the top of this policy

9. State-Specific Privacy Rights

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it's used, the right to delete personal information, and the right to opt-out of the sale of personal information.

European Union Residents (GDPR)

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data.

Effective Date: This Privacy Policy is effective as of December 15, 2024.